Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/hd7nNrL_1mle-1qn41vN6UL_cQo.roa
File: hd7nNrL_1mle-1qn41vN6UL_cQo.roa (raw, json)
Hash identifier: rIFhHh/krDGOpoRXwoCwuKbz6zBx+GuARGKj0KEhEE8=
Subject key identifier: 85:DE:E7:36:B2:FF:D6:69:5E:FB:5A:A7:E3:5B:CD:E9:42:FF:71:0A
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 019C567549306C06EDC94BF2DE9CB6E8D1F2
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/hd7nNrL_1mle-1qn41vN6UL_cQo.roa
Signing time: Fri 13 Feb 2026 10:04:12 +0000
ROA not before: Fri 13 Feb 2026 10:04:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 91.225.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:56:75:49:30:6c:06:ed:c9:4b:f2:de:9c:b6:e8:d1:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: Feb 13 10:04:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=85dee736b2ffd6695efb5aa7e35bcde942ff710a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bb:f3:2f:2e:2c:7d:47:8b:a0:07:ff:f5:40:
53:08:15:91:5a:a1:5e:75:41:ba:06:b5:33:b4:e4:
ca:0b:2f:74:2b:0a:5c:b0:5c:3e:6c:6b:f6:10:73:
4a:bf:dd:3e:9d:f7:5c:c0:32:2e:95:60:2b:0a:5e:
01:d4:04:78:93:b8:7a:3b:84:1e:a4:7b:00:64:3c:
d4:ee:45:27:60:9d:66:c1:f4:a7:f0:c1:ba:52:69:
0e:f7:e0:ed:8e:ba:bc:29:83:46:e4:6d:c2:c2:9e:
b3:8c:26:a9:91:81:d8:eb:0f:2a:b7:ea:19:1e:c2:
66:7f:00:66:ad:3a:fb:fc:81:d1:01:c2:60:18:1a:
c3:a6:88:1a:82:6d:80:b3:bf:11:0b:67:41:af:97:
f2:50:84:bf:9c:57:35:4d:75:84:11:40:47:bf:b7:
7e:79:ab:c7:41:0c:54:0f:50:09:73:64:c1:81:cf:
f9:80:67:a0:de:3b:6d:26:69:1e:12:ea:15:5b:4b:
f5:1f:ce:39:98:7b:26:25:08:9f:ab:88:9c:6a:49:
80:98:83:c2:44:9a:28:c9:b3:22:fe:91:ac:8b:47:
2e:6f:b2:ea:fc:36:2c:40:76:e3:9e:20:ef:2d:6e:
0b:d6:76:ef:e7:18:1f:a8:2c:de:f5:49:88:f2:ce:
a4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:DE:E7:36:B2:FF:D6:69:5E:FB:5A:A7:E3:5B:CD:E9:42:FF:71:0A
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/hd7nNrL_1mle-1qn41vN6UL_cQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.225.225.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:f5:21:60:9e:89:1e:45:a9:62:20:5c:ba:37:a3:7d:d6:da:
80:bc:58:20:d4:52:42:81:13:43:4b:fb:e8:9c:74:69:40:b3:
27:01:ab:41:fe:21:7d:5a:e7:16:7c:d4:65:2d:15:aa:19:d7:
f1:56:23:31:fa:f4:66:ca:ed:d8:a4:68:52:89:33:d1:86:fd:
98:a1:77:b7:cd:59:71:e8:6e:0c:ca:c7:d6:b9:29:7d:0e:aa:
cb:ee:95:b0:0c:1a:fe:08:99:50:05:d9:ab:c4:89:17:1d:4e:
69:f4:2e:29:72:94:02:df:3a:ea:0f:e7:f6:91:b9:24:8a:93:
7c:24:3a:cd:b8:41:e1:e6:15:00:de:82:6a:02:5f:75:52:52:
a6:3a:a3:1d:cf:f5:b9:1b:7e:1f:67:de:6b:aa:71:72:3a:1e:
a8:58:6f:a1:57:05:f5:73:f1:98:f3:7a:4a:51:f3:cb:79:31:
77:9e:34:8a:f1:0a:a0:c4:8b:f5:d9:6f:16:e2:59:65:d5:f7:
4b:21:93:e0:99:9b:b4:61:f4:75:d1:5d:3e:a1:3d:51:15:f9:
f0:e6:3c:e2:90:73:a2:b7:c7:9d:bc:cd:03:75:15:84:13:cf:
27:bb:ff:a7:e4:0f:5d:ad:8a:f9:67:7b:68:d6:d7:f3:54:7a:
40:6b:f5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:24:12 2026 by rpki-client